$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft File: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft (raw, json) Hash identifier: iV7Fdt4OUHhiMYvg076P/l2jczfeHiC9jeGijMPmsqA= Subject key identifier: 8C:A9:7A:D1:1A:EB:5E:35:A2:D1:C2:C4:FF:7F:88:84:53:1D:31:C0 Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Certificate serial: 51CD72CAE525CB35BA117D18E98AAE3115E90800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft Manifest number: 04A7 Signing time: Sat 10 May 2025 17:10:47 +0000 Manifest this update: Sat 10 May 2025 17:05:47 +0000 Manifest next update: Wed 14 May 2025 03:47:47 +0000 Files and hashes: 1: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl (hash: KjX78MuukaLGtlgl/V2hO4Bp00lWZ/ScqaRLVkwSxtc=) 2: 3130332e3134372e3235342e302f32342d3234203d3e20313339393736.roa (hash: dOv5VWfsUQMOSsP2UD/jXSQ8dYcxj2jFJJe5ag4euFo=) 3: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: xfrI3EMm4Ep5Rz+Bb2hqA/GSHJ4grbbfa2TI4fnTntU=) 4: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: 9b47iv2c5Z538/SGsr8Q3zGUoU4AqBNSdgj5MozGce0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:cd:72:ca:e5:25:cb:35:ba:11:7d:18:e9:8a:ae:31:15:e9:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Validity Not Before: May 10 17:05:47 2025 GMT Not After : May 14 03:47:47 2025 GMT Subject: CN=8CA97AD11AEB5E35A2D1C2C4FF7F8884531D31C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:58:7e:52:bd:a0:1a:bb:88:62:95:d2:8e: fa:e0:e0:cc:69:f7:c1:6c:59:2d:83:0d:38:50:73: 4d:56:1e:a3:5a:cb:18:01:a6:7b:df:0c:a5:e3:14: 5f:a9:80:67:64:6c:a0:06:a7:d7:51:b1:93:ff:af: fb:f0:23:25:43:01:b1:60:7e:5b:75:85:f4:41:70: da:75:9a:a6:17:04:a0:ee:1a:6a:b6:81:ec:f2:7c: b5:a4:9b:41:e1:c5:2e:6d:83:64:05:8f:53:5b:ae: a6:ec:6f:3a:0c:c5:51:d4:60:03:cc:be:51:84:5a: 28:6f:0c:81:09:37:e6:e0:96:76:4a:8e:bb:2d:1d: 87:97:a7:d8:5f:af:e7:90:4c:98:6e:57:47:fb:3f: 24:42:a1:7f:72:d2:a6:c6:be:11:38:ac:83:17:d8: 51:6c:98:cf:94:2b:32:06:c9:bf:15:c0:49:54:ac: be:cc:9f:a0:1a:2c:e8:74:d9:3a:ba:82:d9:88:c9: 90:52:ca:1e:40:1c:77:2e:93:36:87:d0:ab:b5:a4: 38:9c:0b:81:c6:5c:85:53:d8:6c:93:eb:8d:48:22: b4:ee:16:1d:b2:b7:70:55:93:79:a9:52:c7:6e:5b: 0d:8d:3e:09:2f:02:1a:2a:80:25:b3:ca:63:08:65: dd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A9:7A:D1:1A:EB:5E:35:A2:D1:C2:C4:FF:7F:88:84:53:1D:31:C0 X509v3 Authority Key Identifier: keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d7:c8:8a:ea:33:3a:80:c1:17:69:40:14:8e:6f:79:d5:f4: ea:69:41:3e:4a:d6:d7:aa:ea:e6:83:07:55:51:6f:b1:96:08: 0c:5d:40:40:2f:7a:44:1d:1a:c7:a5:52:22:de:01:4d:97:67: 74:99:61:02:c2:7a:78:c5:f9:85:e0:63:51:54:c7:5f:5e:62: 95:c5:70:d5:8b:ee:60:69:2e:4a:a3:b3:64:6f:04:a6:b0:b3: f2:e9:d4:dc:3d:1e:50:a5:c6:06:8f:74:e2:bd:08:7c:f4:5e: d5:14:00:b4:5a:7a:75:88:08:71:63:e8:fd:03:c9:35:7b:f7: be:7f:06:55:74:d2:1c:65:ca:36:61:1b:e9:91:a2:4a:93:6a: 9d:47:7e:77:92:e3:86:15:41:e8:d3:c1:30:f4:c7:0f:f8:ee: 02:da:21:7c:b7:99:02:90:42:6f:d6:07:93:5d:85:35:61:1e: 5c:7c:35:fd:46:87:bb:55:ad:d4:ca:48:0e:a9:49:d2:69:60: e7:8d:7b:e6:ea:46:6f:42:cb:c5:25:f9:b6:b7:0e:0b:e9:a8: 93:2f:3d:f9:9b:b5:cb:25:c1:c0:f4:3e:f8:20:25:bf:21:e4: 8b:fd:ac:46:0a:19:b9:a5:11:a6:23:f5:02:cb:68:61:99:ee: ad:5a:e0:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUc1yyuUlyzW6EX0Y6YquMRXpCAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3 QzRDOEUwRDAeFw0yNTA1MTAxNzA1NDdaFw0yNTA1MTQwMzQ3NDdaMDMxMTAvBgNV BAMTKDhDQTk3QUQxMUFFQjVFMzVBMkQxQzJDNEZGN0Y4ODg0NTMxRDMxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJlFh+Ur2gGruIYpXSjvrg4Mxp 98FsWS2DDThQc01WHqNayxgBpnvfDKXjFF+pgGdkbKAGp9dRsZP/r/vwIyVDAbFg flt1hfRBcNp1mqYXBKDuGmq2gezyfLWkm0HhxS5tg2QFj1NbrqbsbzoMxVHUYAPM vlGEWihvDIEJN+bglnZKjrstHYeXp9hfr+eQTJhuV0f7PyRCoX9y0qbGvhE4rIMX 2FFsmM+UKzIGyb8VwElUrL7Mn6AaLOh02Tq6gtmIyZBSyh5AHHcukzaH0Ku1pDic C4HGXIVT2GyT641IIrTuFh2yt3BVk3mpUsduWw2NPgkvAhoqgCWzymMIZd2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjKl60RrrXjWi0cLE/3+IhFMdMcAwHwYDVR0j BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD OEUwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1 QjU3QzRDOEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjXyIrqMzqAwRdpQBSOb3nV9OppQT5K1teq 6uaDB1VRb7GWCAxdQEAvekQdGselUiLeAU2XZ3SZYQLCenjF+YXgY1FUx19eYpXF cNWL7mBpLkqjs2RvBKaws/Lp1Nw9HlClxgaPdOK9CHz0XtUUALRaenWICHFj6P0D yTV7975/BlV00hxlyjZhG+mRokqTap1HfneS44YVQejTwTD0xw/47gLaIXy3mQKQ Qm/WB5NdhTVhHlx8Nf1Gh7tVrdTKSA6pSdJpYOeNe+bqRm9Cy8Ul+ba3DgvpqJMv PfmbtcslwcD0PvggJb8h5Iv9rEYKGbmlEaYj9QLLaGGZ7q1a4M8= -----END CERTIFICATE-----Generated at Sun May 11 02:10:03 2025 by rpki-client